TEPAST Messenger Privacy Policy

Effective: July 16, 2026

TEPAST Messenger provides private and group messaging, attachments, voice calls, and video calls. This policy explains the data needed to operate the service.

Data we process

• Account ID, name, password hash, recovery PIN hash, profile photo, language, and timezone.
• Friends, conversations, messages, reactions, call records, and files you choose to send.
• Device notification tokens, app version, online status, delivery/read state, security logs, and abuse-prevention records.
• Microphone and camera data only while you use voice/video features. Live call media is transported through the configured LiveKit service and is not recorded by TEPAST Messenger unless a recording feature is clearly introduced later.

Use, sharing, and security

Data is used to deliver the service, synchronize devices, prevent abuse, and support account security. Content is shared with the recipients you select and with infrastructure providers required to deliver hosting, calls, and notifications. Transport uses HTTPS/WSS encryption. Messages stored on the server are not currently end-to-end encrypted, so the service must not be described as E2EE.

Retention and control

You can remove messages and conversations using the controls available in Messenger. Backups and security records may remain for a limited period where required for recovery, fraud prevention, or legal obligations.

Delete your account

Sign in, open Your profile, choose Devices and sessions, then Delete my account. Your recovery PIN confirms the request. Sign-in is disabled immediately and permanent deletion is scheduled after seven days.